$ rpki-client -vvvf rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft File: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft (raw, json) Hash identifier: mbyqVwz+t1Xw12DLZraUkIcC2RSBWWXPtaTN9Kv6Urk= Subject key identifier: DE:97:C6:9E:18:A8:DE:3B:64:45:C9:75:7E:53:E6:CD:92:50:53:0D Authority key identifier: 2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C Certificate issuer: /CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Certificate serial: 37893349BACFAC75A1A20C5767BB0EAD9EAD1DF9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:54:42 +0000 Manifest this update: Thu 17 Sep 2026 00:49:42 +0000 Manifest next update: Fri 18 Sep 2026 02:35:42 +0000 Files and hashes: 1: 2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl (hash: baqyflauLdap5bPcJT2NFJlMG7B2lE/8yUh08fbQew0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:35:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:89:33:49:ba:cf:ac:75:a1:a2:0c:57:67:bb:0e:ad:9e:ad:1d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C Validity Not Before: Sep 17 00:49:42 2026 GMT Not After : Sep 18 02:35:42 2026 GMT Subject: CN=DE97C69E18A8DE3B6445C9757E53E6CD9250530D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:aa:c9:23:af:e4:c5:4f:ba:ba:a5:21:d9:39: cf:fd:be:63:03:62:fb:17:54:be:b4:eb:d4:1a:9c: 3d:43:34:fd:0d:06:8d:67:93:5a:6e:ca:7b:17:2f: af:37:6f:c1:fa:7f:d8:45:8a:b4:b3:e1:62:d6:d0: 11:a1:1b:32:ca:62:ad:ff:6f:61:9b:43:d2:7a:13: 76:af:3b:36:08:c1:17:60:f7:4c:62:30:05:7a:91: 83:55:64:0b:72:62:6b:ff:de:e8:51:b2:2a:c9:0a: 63:a0:f3:b8:84:cf:8b:34:57:09:40:25:3c:bd:50: 53:8b:b3:c5:95:bb:79:96:a3:a4:bb:1d:91:31:50: 7a:d4:68:27:f1:36:a3:e5:30:6e:f1:01:d1:ff:3b: 31:14:39:5f:29:d5:ce:d0:db:5d:07:3b:2f:31:6b: 3b:36:5e:07:95:8a:28:ab:c3:38:26:ca:56:eb:6c: 57:45:36:e8:26:7e:3a:01:c6:c5:94:ad:8c:2d:5d: ea:fb:d6:fd:24:4e:d1:a4:7c:b0:a8:96:c3:65:59: 60:c3:0b:ec:15:f5:16:ca:7d:9b:f8:00:c3:63:30: e3:a3:d1:7e:e2:a7:5c:58:2d:33:d2:9d:26:53:73: 18:bd:17:ae:5c:0b:b1:7d:65:35:06:3c:c6:a8:f8: f1:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:97:C6:9E:18:A8:DE:3B:64:45:C9:75:7E:53:E6:CD:92:50:53:0D X509v3 Authority Key Identifier: keyid:2E:1A:4B:EC:A1:A3:FE:AE:F0:C7:92:4E:EE:B4:50:3F:88:5A:87:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/01368ae3-dd12-4aa3-8948-546de04c51e4/0/2E1A4BECA1A3FEAEF0C7924EEEB4503F885A877C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4e:75:ff:c7:c7:ce:a8:ac:05:a6:b0:9c:d5:94:11:d3:2b: 86:c1:f7:7a:c9:55:8c:65:fa:f5:9a:ad:f9:b9:b9:ef:30:84: f7:af:27:58:10:cd:35:53:6e:91:0a:82:c8:71:14:34:ce:66: bd:51:7b:0e:dc:c2:2f:84:b2:8c:eb:48:e6:e2:0b:10:18:9a: 0f:6e:b7:07:77:03:0a:31:dd:8b:27:35:7f:e2:4b:92:9c:de: 59:ad:c7:57:79:2a:17:89:f9:81:49:6b:be:88:94:81:22:43: e2:f6:40:36:1a:b9:f3:0e:55:07:dd:ef:86:ed:8c:06:ca:8d: 87:f9:ed:9c:cb:80:bc:ae:15:8b:65:b2:33:7c:83:40:c5:4f: 50:60:d7:23:b6:00:90:ff:e8:bc:ac:55:ad:0d:77:84:a7:84: 97:24:7d:da:9e:95:db:ff:1b:83:5e:90:19:aa:f6:93:e4:63: 55:4e:e9:45:89:56:a4:f5:c9:1b:51:3a:8f:25:2c:a8:64:43: 79:ee:85:90:f2:91:9e:58:20:d1:e7:48:6b:3d:30:95:e6:51: 39:28:cf:2b:3c:cb:02:71:6c:20:33:38:a0:07:3c:22:3b:26: af:a4:01:19:b1:30:f3:0d:57:b0:ef:d4:84:40:38:5b:36:c1: 4f:07:2e:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN4kzSbrPrHWhogxXZ7sOrZ6tHfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4 ODVBODc3QzAeFw0yNjA5MTcwMDQ5NDJaFw0yNjA5MTgwMjM1NDJaMDMxMTAvBgNV BAMTKERFOTdDNjlFMThBOERFM0I2NDQ1Qzk3NTdFNTNFNkNEOTI1MDUzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6qskjr+TFT7q6pSHZOc/9vmMD YvsXVL6069QanD1DNP0NBo1nk1puynsXL683b8H6f9hFirSz4WLW0BGhGzLKYq3/ b2GbQ9J6E3avOzYIwRdg90xiMAV6kYNVZAtyYmv/3uhRsirJCmOg87iEz4s0VwlA JTy9UFOLs8WVu3mWo6S7HZExUHrUaCfxNqPlMG7xAdH/OzEUOV8p1c7Q210HOy8x azs2XgeViiirwzgmylbrbFdFNugmfjoBxsWUrYwtXer71v0kTtGkfLColsNlWWDD C+wV9RbKfZv4AMNjMOOj0X7ip1xYLTPSnSZTcxi9F65cC7F9ZTUGPMao+PF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3pfGnhio3jtkRcl1flPmzZJQUw0wHwYDVR0j BBgwFoAULhpL7KGj/q7wx5JO7rRQP4hah3wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDEzNjhhZTMtZGQxMi00YWEzLTg5NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNB MUEzRkVBRUYwQzc5MjRFRUVCNDUwM0Y4ODVBODc3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8yRTFBNEJFQ0ExQTNGRUFFRjBDNzkyNEVFRUI0NTAzRjg4NUE4 NzdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDEzNjhhZTMtZGQxMi00YWEzLTg5 NDgtNTQ2ZGUwNGM1MWU0LzAvMkUxQTRCRUNBMUEzRkVBRUYwQzc5MjRFRUVCNDUw M0Y4ODVBODc3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtOdf/Hx86orAWmsJzVlBHTK4bB93rJVYxl +vWarfm5ue8whPevJ1gQzTVTbpEKgshxFDTOZr1Rew7cwi+EsozrSObiCxAYmg9u twd3Awox3YsnNX/iS5Kc3lmtx1d5KheJ+YFJa76IlIEiQ+L2QDYaufMOVQfd74bt jAbKjYf57ZzLgLyuFYtlsjN8g0DFT1Bg1yO2AJD/6LysVa0Nd4SnhJckfdqeldv/ G4NekBmq9pPkY1VO6UWJVqT1yRtROo8lLKhkQ3nuhZDykZ5YINHnSGs9MJXmUTko zys8ywJxbCAzOKAHPCI7Jq+kARmxMPMNV7Dv1IRAOFs2wU8HLl4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:05:02 2026 by rpki-client